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APPARATUS AND METHOD OF ENCODING AND DECODING 

INFORMATION 

Field of the Invention 

This invention relates to apparatus and method of encoding and decoding 
information. 

Background of Use Invention 

There are numerous methods of authentication in which a user encrypts a password, 
number, or message within a transmission in a manner that only the assigned reader can 
access. 

The ability to prove that a message originated from a specific source over an 
unsecure network means has significant commercial advantage in allowing transfer of 
information that may otherwise require some for of specialised delivery and/or delivery 
media leading to extra cost and/or delay in transfer. Such transfers become more important 
with the increase of on-line banking means and purchasing. In many cases the security 
relies on a simple password, which if made public, allows any person to appear to be the 
rightful password owner. In authentication methods single pad methods are beneficial in 
that the same password is only used once in some form of sequence. However, if the 
method is properly understood then the sequence may be predetermined. 

In many cases the method of security and methods of cracking rely on random 
number generation. It is known in the art that a random number generator based on a 
mathematical code is not random but predominantly non-random to a specific number of 
values. If too many numbers are required such that the random number cycles or if a fault 
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in the generator is known by the hacker such that no-randomness occurs earlier then this 
aids methods of hacking 

If the password is cracked or obtained by other means then the systems ceases to be 
secure. For reasonable security the passwords require to be large, frequently 1 28 bits or 
greater and a random sequence should be chosen. The inability of the user to remember 
such a random sequence frequently requires the user stores the password, which may defeat 
security. In addition the user may use the password a multitude of times. Reuse of the same 
password means that it is easier to crack the password, in addition if a hacker obtains said 
password then all documents encrypted with it may be opened. 

The rise in methods to stop de-encryption tend to rely on increasing the effective 
password length to many bits. In most cases this does not make breaking the password 
harder but simply more time-consuming and a large supercomputer or a network of smaller 
personal computers (PC's) will eventually breach the code. A limit on password 
technology is that when the code is known, then it is obvious when the password has been 
found because the document changes from meaningless random data to recognisable words 
and figures. 

One limitation of all security methods is that they must operate at the required 
speed on the computers they are designed for and thus typically an encode/decode process 
must be made with seconds to minutes such that the product may be usable. However when 
the algorithms are loaded on a large computer many guesses may be made. 

One limitation of many secure systems is that the means of encryption must be 
transferred in a secure way and that where software is used the source code must be kept 
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secret as this may allow breach of the method. It is known in the art that compiled code can 
be reverse engineered thus allowing a means of breaching such systems 

It is an aim of the present invention to obviate or reduce the above mentioned 
problems. 

Summary of the Invention 



is 



According to one non-limiting embodiment of the present invention, there i 
provided a method for encoding and decoding information, the method comprising the 
steps of selecting a mathematical function having at least one parameter, constraining the 
mathematical function by defining a decoding key as the value of at least one parameter of 
the function, generating encoded data using the mathematical function according to the 
information and the decoding key, decoding the encoded data using the decoding key to 
constrain the mathematical function, wherein decoding of the mathematical function would 
be ill-conditioned without the constraint. 

The information can comprise at least one encryption key. The method can further 
comprise the step of using the encryption key to encode and decode data in a public key 
cryptosystem. 

The method can include the step of reducing the precision of the encoded data. The 
precision can be reduced using truncation. The precision can be reduced using rounding. 
The method can include the step of addingnoise to the encoded data. 

The method can include the additional step of sending the encoded data over a 
communication link. 

The method can include the step of storing the encoded data in a storage medium. 
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The infonnation can include a password. The method can include the step of using 
the password to decrypt one or more files- The method can include the step of using the 
password to access an area. The method can include the step of using the password to use 
equipment The method can include the step of using the password to use software. 

The information can include an authentication marker and the method can include 
the further step of authenticating the encoded data using the authentication marker. 

The information can include mutation information and the method can include the 
step of using the mutation information to alter at least one of the parameters in a defined 



The method may be applied by the user or be applied at an electronic post box such 
that the user is unaware of the mechanim* 

The method may be supplied in unprotected means as knowledge of the 
implementation does not breach the method This is advantageous as it allows the method 
to be supplied as libraiy functions to be built into larger works without security issues 

Brief Description of the Drawings 

Embodiments of the invention will now be described solely by way of example and 
with reference to the accompanying drawings in which: 

Figure 1 shows a method according to the present invention for encoding and 
decoding information; 

Figure 2 shows a public key cryptosystem; 

Figure 3 shows a rounding process; 
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Figure 4 shows a truncation process; 
Figure 5 shows noise added to encoded data; 
Figure 6 shows a communication link; 
Figure 7 shows a system comprising a computer; 
. Figure 8 shows an authentication marker; and 
Figure 9 shows a mutation process. 

Detailed Description of Preferred Embodiments of the Invention 

Figure 1 shows a method for encoding and decoding information I , the method 
comprising the steps of selecting a mathematical function 2 having at least one parameter 
3» constraining the mathematical function 2 by defining a decoding key 4 as the value of at 
least one parameter 3 of the function 2, generating encoded data 5 using the mathematical 
function 2 accoiding to the information 1 and the decoding key 4, decoding the encoded 
data 5 using the decoding key 4 to constrain the mathematical function 2, wherein decoding 
of the mathematical function 2 would be ill-conditioned without the constraint. 

Figure 2 shows a public key cryptosystem 20 that utilizes at least one key 21 to 
encode and decode data. The key 21 can be contained in the information 1 that is encoded 
and decoded using the method of Figure 1 . The public key cryptosystem 20 can be the 
Diffe-Hellman public key cryptosystem. 

As shown in Figure 3, the method can include the step of reducing the precision of 
the encoded data 5 by rounding 30 to yield rounded data 31. Alternatively, or additionally, 
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the precision can be reduced using truncation 40 to yield truncated data 41 as shown in 
Figure 4. 

As shown in Figure 5, the method can include the step of adding noise 51 to the 
encoded data 5 to yield modified data 52. 

Figure 6 shows an apparatus 60 for encoding and decoding the information 1 
comprising a transmitter 61, a receiver 62, a communication link 63, a storage medium 64. 
The information. 1 is encoded in the transmitter 61, the encoded data 5 is sent over the 
communication link 63 and decoded at the receiver 62. The encoded data 5 can be stored 
in the storage medium 64. 

Figure 7 shows a system 70 comprising a computer 7 1, files 72, equipment 73, and 
software 74. The equipment 73 can comprise a printer 75 and data storage 76. The system 
70 may include a secure area 77. The information I can include a password 78. The 
password 78 may allow the decryption of one or more the files 72. The password 78 may 
allow access to the secure area 77. The password 78 may allow usage of the equipment 73, 
The password 78 may allow usage of the software 74. 

Figure 8 shows an authentication marker 81 that is part of the information 1. The 
method can include the further step of authenticating the encoded data 5 using the 
authentication marker 8 1 . 

Figure 9 shows encoded data 90 that includes mutation information 91. Li this 
example the encoded data 5 is separated into different packets 92 and the parameter 4 
changes. Variation of the parameter 4 is known by the user to signify a different constraint 
in the decoding process. 
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Further details of the invention are provided in the Appendix, which describes 
many aspects of the invention and provides specific examples of how to encode and decode 
information ustt^g the methods and apparatus of the invention. 

The embodiments and different aspects of the invention contain many features, 
which may be used in other embodiments and aspects of the invention. 

It is to be appreciated that the embodiments of the invention described above with 
reference to the accompanying drawings have been given by way of example only and that 
modifications and additional components may be provided to enhance the performance of 
the apparatus. 

The present invention extends to the above mentioned features taken singularly or 
in any combination. 
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. Method of Identification of User 

The method allows a novel means of securely passing data between a plurality of 
transceivers. The method is of particular use as a method of authenticating between 
transceivers. The method may of particular use for transfers of information by telephone 
line of sight optical means, over the Internet and intranets and in terms of wireless 
communications and in any media where transmission may not otherwise be considered 
secure. Applications include but are not limited to purchasing and on-line banking and 
the control of use of distant hardware or software. 



There are numerous methods of authentication where a user encrypts a password or 
number within a transmission in a manner that only the assigned reader can access. 
The ability to prove that a message originated from a specific source over a unsecure 
network means has significant commercial advantage in allowing transfer of information 
that may otherwise require some for of specialised delivery and/or delivery media leading 
to extra cost and/or delay in transfer. Such transfers become more important with the 
increase of on-line banking means and purchasing. In many cases the security relies on a 
simple password which if made public allows any person to act as the rightful password 
owner. In authentication methods single pad methods are beneficial in that the same 
password is only used once in some form of sequence. However, if the method is 
properly understood then the sequence may be predetermined. 

In many cases the method of security and methods of cracking rely on random number 
generation. It is known in the art that a random number generator based on a 
mathematical code is not random but predominantly non-random to a specific number of 
values. If too many numbers are required such that the random number cycles or if a fault 
in the generator is known by the hacker such that no-randomness occurs earlier then this 
aids methods of hacking 

If the password is cracked or obtained by other means then the systems ceases to be 
secure. For reasonable security the passwords require to be large, frequently 128 bits or 
greater and a random sequence should be chosen. The inability of the user to remember 
such a random sequence frequently requires the user stores the password, which may 
defeat security. In addition the user may use the password a multitude of times. Reuse of 
the same password means that it is easier to crack the password, in addition if a hacker 
obtains said password then all documents encrypted with it may be opened. 

The rise in methods to stop de-encryption tend to rely on increasing the effective 
password length to many bits. In most cases this does not make breach of the password 
harder bit simply more time-consurning and a large supercomputer or a network of 
smaller PC's will eventually breach the code. It is claimed the limit on password 
technology is that It is obvious to the use when the code has been found. By way of 
example when the password for a document is found the document changes from 
meaningless random data to recognisable words and figures. 



Prior Art 



Oct. 02 08:OQp 



John R Bann 




One limitation of all security methods is that must operate at the required speed on the 
computers they are designed for and thus typically an encode/decode process must be 
made with seconds to minutes such that the product may be usable- However when the 
dgorithms are loaded on a large computer many guesses may be made. 

It is claimed the invention 

It is claimed that the method overcomes is significantly improved over conventional 
methods as correct authentication by the user may be made many order of magnitude 
faster than any method of guessing and thus this hinders any hacking considerably and 
gives significant advantage to the method 

It is claimed the invention allows a means of authentication when there are multiple 
passwords that apparently fit as correct but that it is not possible to tell which is the 
correct password from the list of infinite or near infinite solutions. Thus even where a 
computer means allowed all possible passwords to be trailed the reader would still be 
unaware of which was the correct password. 

It is claimed the method allows the password to be engineered such that it appears a much 
poorer fit than a plurality of other passwords 

It is claimed that the invention proposed allows the code to change on every transmission 
such that the above conventional means of decryption is not possible 

It is claimed that tihe proposed method allows all or part of the code to supplied afresh by 
the user directly or by a random number generator or by a person or system acting on as 
an 'exchange operator* and thus the code may be made not to follow an simple automated 
cycle and that the conventional method of decryption of analysis of multiple messages 
would not be possible. 

Furthermore it is claimed that whilst the user may supply some number afresh the system 
may be implemented such that he is not aware of what affect this has on the transmitted 
signal and that even if he supplied his 'key' directly to a hacker that the hacker would not 
be able to break the code - 

It is claimed that by the 'one pad* method proposed each code is used once and thus 
knowing or copying a code is not of use for further hacking. 

It is claimed that the change in the signature can be so rapid that it is unlikely that a 
hacker could decrypt rapidly enough to break into the transmissions. The hacker would 
require to know the method, all the rules used in the method on a transmission, before 
another user retransmitted and the code mutated 
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It is claimed feat the method allows each transceiver pair to have a unique key and that 
the key for each user pair mutates differently such that even where a hacker managed to 
infiltrate one node he can only impersonate/decrypt messages for said person and not 
impersonate or access other systems. Such that the method allows high security as that 
'node * may be disconnected, switched off or simply ignored. 

It is known in the art that encrypting an already encrypted data stream may be counter 
productive and the two methods may counteract and weaken the final encryption* It is 
claimed the method allows a second conventional encryption method to be used on the 
data as the mechanism used by the invention will not be weakened by further 
conventional encrypting means. 

It is claimed the method may be used as a method of de-coupling data between two or 
more encryption means and thus allowing a plurality of encryption means lo be applied to 
the data 

The method termed HI Conditioned Authentication may be implement in a plurality of 
ways using a plurality of mathematical functions and in a plurality of media and the 
object is described here as an example of a few of the implementations that may be 
carried out 

In a first aspect of the invention 

We assume two transceivers on an insecure media wish to communicate and the 
transceivers wish to authenticate transmissions and may wish also top provide means of 
sending encrypted data where the data was the information itself or a key or password to 
open a second file encrypted by other means 

The first transmitter has a means of selecting a number of mathematical functions. One 
such function may be an exponential function. This is given as an example many 
functions may thus be selected. 

The transmitter produces a function that is the sum of a number of a number of 
exponential of differing decay and differing weighting and produces a trace as shown 
Figure I. 

Preferably there ate over 3 separate species within the mathematical function 
Preferably there are over 6 separate species within the mathematical function 
Preferably there are over 12 separate species within the mathematical function 
Preferably there are over 30 separate species within the mathematical function 
preferably there are over 64 separate species within the mathematical function 
Preferably the weighting of each species may only be varied in steps and that the step 
magnitude is greater than Wo of the maximum weighting of any individual exponential. 
Preferably the step value is greater than 10%. 
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In this invention, we define species to define the functions that make up the complete 
mathematical function used in the analysis. By way of example a species may be an 
exponential function used in the final mathematical function that is the sum of many 
exponentials. 

Preferably the step value is defined by means of the relative error in analysis of function 
and consideration of the method of exior coding used such that the maximum number of 
data intervals for the required bit error rate is selected. 

In this first example of the invention we assume the transmitter and receiver have a single 
start-up code part of which is known to both that is used only on this first transmission. 

Preferably the sender then applies random noise to the data points. The application of 
noise may be of many forms. One such method is to apply fixed percent error in each 
data point according to random numbers generated by a random number generator. 

Preferably the random number generator is seed at least in part by input fiom the 
operator. 

Preferably the random generator is seed at least in part by some information supplied by 
some indeterminately varying component the communication system. An example would 
be the fen speed or CPU temperature. 

Where a data file is to be sent, preferably the authentication mark is attached to or 
embedded in the data file. This may be by means of placing the mark within the 
document as a picture, watermark or header or by means of producing a single file 
containing both the label and the data in a file. This second file may be encrpyted by 
other means 

Preferably data compression is also used to make the file as small for transportation. 
The message is sent 

The receiver must then unpack the message. The receiver then analyses the decay by 
force fitting means. The system force fits the analysis to a comb which defines the 
number and position of each exponential value and measures the magnitude of each 
decay- 

The magnitude of at least one decay is used as authentication. The receiver knows that if 
on the force fit that the exponential/s defined did not give the magnitude required then the 
message did not come from the 

Preferably the magnitude of at least on decay is used to transmit information. Preferably 
at least part of this information relates to how the sender wishes the authentication code 
to be changed and returned in the next message or as a receipt code. 
The method is shown in figure below 




Decay Rate 

The top trace shows three exponential functions of differing magnitude and decay rate 
plotted. The second top trace shows a representation of the decay rates and magnitudes 
and thus we may define the three exponential trace above using 6 parameter 3 decay 
rates, 2 relative magnitudes and an absolute magnitude. The middle trace indicates the 
final mixture of the decay rates and the second lowest the same trace with noise added. 
The lowest trace indicate how force fitting to the noisy trace would give rise to the 
original distribution with some error. However, this would only he found if a force fit 
was carried out (3 unknowns). If a floating 3 exponential fit was carried (6 unknowns) 
then a differing result may be obtained. If the data was fitted to an arbitrary number of 
exponential then the number of possible solutions, with the same fitting error is infinite. 
Quad exponential fits would appear a more correct solution than tri exponential and penta 
fits better than quad. Where an incorrect number of exponential was used the decay rate 
trace may be significantly different with decays in incorrect places as well as with 
incorrect magnitudes, hi such an example the X axis could be any units but it is common 
in fields of multi-exponential analysis to consider the X axis as time or delay time and 
thus where we define the exponentil decay in terms of period we may consider the 
analysis as temporal. 
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It is claimed that the addition of noise and any rounding errors may be used to mate the 
analysis more complex. It will be obvious to one skilled in the art that the conventional 
method to crack the mechanism would be to continuously guess the number, position and 
magnitude of exponents. Whilst an infinite number of solutions are possible a sensible 
backing approach would be to try only fits which are reasonable and try the simplest fits : 
first. It is claimed that the method disallows this whilst maintaining a robust force fit 
analysis as the force fit contains half or less fitting parameters. This is shown in Figures 
below. 

The method 8196 data points in 1 1 blocks with a dilation of 2 between each block* The 
first block spacing was 0.0 1 and thus the final X position was 1 67772. Eight exponetlals 
were selected of decay value 48,72,108,162 ? 243 3 365.547,820,1230 5 1845 3 2768,4152 ; 
Various differing weighting of each exponential were selected to show the force fitting 
mechanism was stable. In the hade attempt a floating fit was used using the same 
algorithims and implemented the same was as the force fit method. In the floating fit 
method the system needs a first guess to start. In all these examples we gave the floating 
fit the correct decay pattern as the starting point In no case did the hacking method 
operate successfufly even given the correct information in the first place* 
In tiie force fit the average error in magnitude is 0.4% (rms) whilst in the floating fit it is 
50% (rms). The error in analysis of the weighting o each exponential is 127 times worse. 
The reason for this is that the noise and iounding errors makes a differing exponential 
comb a better fit In the floating fit analysis even though the system was given the correct 
answer at the first iteration on average at the end of the fitting process the decay vale was 
in error by 27 percent The data is given in table X 

In this analysis the force fitting method has 8 unknown parameters and took 60 seconds 
whereas the float fitting analysis had 16 unknowns and took 44 minutes, on the same 
processor with similar algorithms. 

It is claimed that by addition of exponential where both the decay and the magnitude is 
fixed in every transmission it is possible to further increase the complexity of analysis for 
the backer whilst having minimum effect on the force fit 
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Figure 

The amplitudes of the exponetional functions as previously described 



The original receiver may now produces a new function to return using the decay rate 
changes requested by the original transmitter to produce the authentication mark and 
using other decay rates to send information on how to change the signal of retansmission 
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Table The data corresponding to the previous graphs. 
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The example has discussed the same function containing both the authentication code and 
tire data transmission. It could be that a plurality of signatures are produced using the 
same exponential decays and that one of these is weighted as an authentication signature 
and one contains the data transfer. However, in this method the hacker knows all data sets 
contain the same decays and thus may attempt to improve his analysis by means of 
solution of all data sets at one time reducing the security of the authentication. 

Thus transceiver A controls me authentication change of transceiver B and visa versa. 

In this maimer on every communication, including receipt communications, the function 
sent changes and neither side can 'guess' how it will change on each re-send: The change 
requested by each transceiver may be partially hardwired and partially user requested 
Thus a hacker may obtain any sent function but since this function is transmitted only 
once it is of no use. 

Preferably the delay between communications is never allowed to become too long If 
delays between communications are kept as short as possible then this allows less time 
for any hacker to obtain the correct sequence, thus the method benefits from algorithms 
which when no message has been sent for a significant period send a message just to keen 
me code changing regularly. 



This example used exponentials to produce an ill conditioned signal. There are a pluarity 
of such functions.By way of example gives examples of similar shapes of trace given by 
a plurality of functions and the sum of the functions is also shown. In such a case the 
hacker needs to know not only the parameters of the functions but also which functions 
are present 



n 




8 



Series 1 =3/ exp (x) 
series 2 = I/x 2 
series 3 = 1/x 3 
series 4= 1/x! 
series 5 = sum of above/4 



The method may be explained as the general case of any function by means of the 
following 
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Let us assume that a certain physical phenomenal produces a mea- 
surable signal S'(t) that changes with time according to a certain model 

S*(t) = M(t;p) (1) 

where p is a vector that contains a series of adjustable parameters that can. 
be calculated by fitting the model to the experimental values of the signal. 
The signal could be, for example, the intensity of the fluorescence emission 
from a fmorophore after excitation, in which case the model would be a sum 
of exponentials: 

JV 

J(t)=£A<espM/toO (2) 

i=i 

where the amplitude and decay time of each exponential are the adjustable 
parameters. 

There are different methods to obtain the values of the adjustable param- 
eters in a situation like this, of which the most popular is probably the least 
squares method. In this method the value of the vector p that minimises 
the value of is sought, with x 2 defined as: 

x 2 = E4[5*(^)-^;p3] 2 (3) 

where N is the number of experimental points measured and a* 5s the mea- 
surement error in the point obtained at time h. x 2 k then a hypersurface 
in an n dimensional space, where n is the number of adjustable parameters, 
and the least squares methods look for the immmum of that hyper surface. 

In situations where the model is simple, the values of the parameters 
that minimise x 2 can be calculated explicitly by differentiating Equation 3 
with respect top and solving for the value of p that makes the first derivative 
zero- However, in the case of general models, the equation obtained using 
that method is not solvable in p 7 and hence approximate numerical methods 
are required- La that case, the accuracy of the experimental measurements 
limits the precision with which the values of the adjustable parameters can 
be calculated, and in many cases, makes it impoaible to obtain reasonable 
estimates of the values of the adjustable parameters. For instance, in the 
example of the fluorophore lifetime, it is not posible in general to obtain 
both the value of the lifetimes (toi) and amplitudes {Ai) simultaneously for 
mixtures of more than five or six exponentials. However, if, for instance, 
the values of the lifetimes are known, it can be possible (under certain 
conditions) to calculate the values of the amplitudes for larger mixtures of 
exponentials. 

The inherent limitation in the ability to determine accuarately the values , 
of the adjustable parameters in a certain physical model can be used to 
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devise a signing method which is virtually impoaible to fake by technical 
means. 

- Using the exponentials aa an example (any other physical model could 
be equally valid provided it contains a large number of adjustable param- 
eter), one could generate a signal stream consisting in the sum of For in- 
stance twelve exponentials with some random noise added to it. If the set 
of lifetimes or amplitudes used to generate the signal is not known, it is 
not possible to calculate the values only from the signal with any accuracy 
However, if the receiver of the message knows the values of the lifetimes that 
the sender uBed to calculate the stream, it is possible to obtain the values of 
the amplitudes contained in the data. In this simple example, the receiver 
can compare the values calculated with a version sent by some other secure 
means by the sender to verify the senders identity. In the event of a possible 
interception of the transmitted k^y, it is not possible to extract the set of 
lifetimes or amplitudes due to the limitations of the fitting procedures. With 
this method, the signature is secure against a possible attempt to fake the 
identity of the sender aB long as the sender and the receiver keep the set of 
fixed parameters used for decoding secure- 

An example implementation has been generated using the sum of twelve 
exponentials, the technical details are in the attached pdf. The implemen- 
tation consists of two programs keygen and keycheck. keygan generates 
the key from the signature provided, and key check calculates the signa- 
ture from the key. To ensure that both ends are sinchronysed the values of 
thfe lifetimes and the method used to generate the time series required are 
hardooded identical in both programs. As an adtional measure to avoid the 
values of the lifetimes being extracted by selective setting of the amplitudes 
to zero, only some of the amplitudes are actually fitted, while others are 
fixed. 
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In a second aspect of the invention we describe a similar implementation to the first but 
with the use of baseline offsets 



The fitting mechanism requires that the baseline of the exponential (or whatever function 
is used) be known for accurate analysis. Typically this requires a measure of the baseline 
at between 10 or 100 fold the largest decay analysed. 

If not any noise in the data whether intrinsic or produced as well as rounding errors in the 
fit will tend to magnify errors. The limitation is most significant for multi- exponential 
and similarly formed fits 

If a signal as Figure B is sent where the tail of the exponential is not fully included and 
preferably noise is included in the decay it is known that the fit will be highly unstable 
unless the baseline is known. Thus it is claimed that where a receiver knows the baseline 
value as a s key' that the method of baseline shifting may be used as a means of secure 
transmission* Thus by way of example the transmission always includes 12 set decays of 
varying magnitudes on top of a baseline that may be shifted and included with noise- On 
each transmission between transceivers the sender tells the receiver what magnitude of 
baseline to include in the next transmission coded in the exponential magnitudes. Even 
though the decay rate of the exponentials never changes the constant shift in the baseline 
and relative magnitudes of the decays makes the method robust to hacking 



The method may used be used alone but may also be used within the previous aspects of 
the invention where the exponential decays are also shifted making the earlier aspects of 
the invention even more robust. 

This aspect of the invention has been described in terns of exponential fitting but 
obviously works in any fitting procedure where baseline is required in the analysis 
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A third aspect of the invention is now given which is an improvement of the previous 
example in that the baseline is not a single value. Ideally the baseline contains a function 
that is not highly repetitive over the range used. Thus for instance the baseline may be a 
straight line where the gradient and/or offset are defined between transceivers. 

In Figure A the trace appears as a single exponential with no offset however when the full 
fbnction is shown magnified then it is apparent that a negative gradient underlies the 
exponential. This would tend to disturb the fitting procedure not only as no baseline may 
be fitted- but because the trace would tend to act as numerous low amplitude long decay 
times 
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In a second example a repetitive mathematical function is used but only in restricted 
values. By way of example the baseline may compose a half cycle or one quarter cycle of 
a sine wave and the sine wave may be shifted in phase 
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Examples of possible baseline functions. The dotted line indication the extemt of the 
range used for the analysis. The top trace a quadratic function which goes to zero before 
the full range of decays allowed to the analysis. This would cause the baseline to appear 
as zero, at it is at longer decay times and bias different distributions differently strongly 
affecting the fit This will only increase the force fitting analysis by two parameters. The 
second trace is that of two quadratic functions (or a distorted sine wave). If quadratics 
were used and they are mirror imaged and join at a gradient of zero then again only two 
parameters are required. In the case shown the baseline is not null at the maximum of the 
range used but a strongly changing function, again upsetting the analysis. 
The lower trace shows two quadratics but this time of differing values 

This method may again be used with functions of fixed decay or may improve methods 
where the decays are also altered 

It is claimed that even where a hacker was aware of the method and thus new that such 
offsets were in use the method allows a method of significantly increasing the time 
required by the hacker to analyse the data. In the example of 2 quadratics the hacker has 
an extra 6 parameters to consider in the fit, whereas in the force fit where the parameters 
are known, it is a simple subtraction before the fit and thus does not increase complexity. 

In a fourth aspect of the invention a method of dilation is used. In the fitting methods 
described it has been assumed that the spacing of the data points is linear. It is claimed 
that buy making them non-linear the method may again be applied where the decay 
values need not be varied. By way of example if the spacing of the data points is fixed by 

where P is a real number then by varying P the method causes the data (when fitted on 
linear channels) to vary significantly and analysis is not possible unless P is known, 
where defines the xaxis value at position N 

Thus P is a scaling factor, it is claimed this may be further improved by making P a non 
continuous function by way of example 

X^X-n-i*? i£FN<16 
X N =X^t*FiffN<10I 
Xn^X-a-i*?" iffN<122 

In this case there are three scaling factors which alter in a non-continuous manner at 
various channel blocks and for proper fitting all 6 parameters must be known. In the 
example data of figure X there were 1 1 channel blocks and thus in effect a further 22 
parameters unknown. Again this method may be used with fixed decay times or to 
improve floating decay methods. 

In the latter case it is claimed as a significant method of increasing the complexity of the 
analysis required by the hacker, even where he is aware that dilation is in use. In the force 
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fit the method adds ha significant complexity whereas to the hacker where the dilation 
values/positions are not known it may add a highly significant number of parameters 
increasing the hackers analysis time. 

It is further claimed that dilation should be selected to suit the functions in analysis. In 
this manner the number of points required to represent the signature may be reduced 
without significant increased error (and reduction in the number of allowable levels or 
BER) in the force fitting analysis. It is known in the art that an optimum spacing for 
exponential type functions is of a logarithmic nature 

In a fifth aspect of the invention 

It is claimed that proper selection of the allowable ranges of the functions used in the 
analysis allows improvement in the stability of the force fit By way of example if 
exponential decays of values of 1 0,20530,40 units are used the separation of thelO and 20 
unit decays will be separable in more robust manner in the force fit than the 30,40 decays* 

While the 20 decay is twice as long as the 10 decay the 40 decay is only 25% as long as 
the 30. 

Thus optimum spacing for the decays could be argued at 

The next decay being a fixed percentage of the first However this would lead to the 
inability to change the decays. It is claimed that the above may be mitigated by defining a 
minimum spacing and thus only limiting the range of each decay 

Thus one decay may be placed in the region 0-20, one decay may be placed in the region 
40-60 and so forth such that the error in the analysis of each decay is kept similar if not 
identical. Thus in such a method the function parameters are constrained by the first 
parameter. By way of example 

The user is requested to input any number between 0 and 1 . The system disaalows a 
decay less than, by way of example, 100 channels to stop the function being clipped and 
allows the first decay to be anywhere in the range of 100-1000, Thus input of 0 gives 
decay of 100 and an input of 1 a decay of 1000 

The user is then requested to put in second value between 0 and 1 defined as V. This 
value may then be used to begin to set up the exponential spacing such as 

D N = D^i*((2*V+2)/2) 

such that exponetionals are spaced on a comb increasing by between 1 5 and 2 times the 
previous decay value. 
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The user is then requested for a further set of numbers between 0 and lto set all but the 
first decay but these values do not define the decays directly but vary each decay from the 
initial comb function 

A value of 0 shifts the decay by -12.5 percent band a value of shifts by +12.5%, In such a 
means decays cannot be requested which are so close as to cause instability in the 
method 

In a sixth aspect of the invention 

. In previous example sit has been assumed that the magnitudes of the decays are 
separated into levels and that the levels that there are a similar number of levels for each 
decay- It is claimed that the number of levels and thus information carrying capacity of 
the code may be dynamic and reduce for functions that may interact In this manner 
almost any selection of exponentials is allowable as the receiver (who has requested the 
change) is aware of what accuracy occurs in each function. 

It si claimed that in implementations of the method it is preferable to have functions at 
the extremes of the range which are fixed value and magnitude and which the user has no 
control over and is unaware of. In this manner by a hacker with the machine code will 
find it complex to de-engineer the code by switching exponentials off in a sequence 

It is claimed beneficial that in implementations of the method the user is asked for a 
series of numbers but that these numbers are not used directly as the choice of function 
parameters but used in a indirect manner such that a hacker will have significant 
limitation in de-engineering the code 

It is claimed it is beneficial to limit the range of the magnitudes of the exponentials or the 
minimum number of exponentials that may be used in the analysis so a hacker would find 
it complex to dengineer the code by selectively turning off the majority of exponentials. 

In a seventh aspect of the invention no noise is added to the signal, this would appear to 
make the de-convolution a simple analytic solution where one answer — the correct one, 
gave the optimum fit. However, in the second aspect of the invention the bit numbers 
representing the signal are limited to induce rounding errors. 
Rounding errors in the type of calculation described typically occur in mathematical 
operations such as multiplication but methods exist of allowing calculation to arbitrary bit 
length- However by limiting the bit length of the numbers in the function an effective 
rounding error may be engineered In tins manner the method works similar to the first 
aspect of the invention but improved in that no random number generators are required. It 
is known in the art that random number generators are not truly random and thus this 
allows a means or removing a possible weak link from the method 
The restriction of the bit length means that signatures may be generated and deconvolute 
with fixed precision low bit number algorithms allowing fast coding and decoding with 
no concern on the ability of supercomputers to carry out more complex and improved 
fitting. 
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In an eight aspect of the invention use is made of functions of differing sign. Figure A 
shows the summation of positive and negative exponetial values. Figure B shows 
summation of exponetials of +ve and -ve decay. It is claimed that by controlled use of 
such signs it may be made complex for a hacker to ascertain exactly what functions are 
being used to within the coding further enhancing the security of the method. This is 
illustrated by way of example Figure C shows such a method where the first and last 
decays are fixed magnitude and fixed sign, adding nothing to the complexity of the force 
fitting. Hie signal exponential functions are cons tanned to be of smaller magnitude and 
thus have less affect on the relative overall visible shape of the sum of the decays. The 
sum does not appear exponetial in any form and without prior knowledge of the functions 
used the complexity for hacking is significantly increased 

Such methods are demonstated by Figures 
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Functions -exp(x-l) and exp— L5X and their summation and tie summation. The 
summation does not appear to be exponetial. 
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Functions EXP(A20*-1) and =0.25+ -EXP(- 1 .5*A20) and their summation, again the 
summation does not appear to be exponential 




The summation of [EXP(X*-1)] + [0J25+ -EXP(-1 .5*X)] of the previous graph and the 
function =0.04 *X -0.2 limited for values Y <0 as well as the summation. The resulting 
trace appears to be some form damped and biased sine type function 
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An expand view of the previous summation, this complex figure does not appear 
anything like a conventional exponetial or bi-exponetial function. 



In an eight aspect of the Invention 

The method is used to send information pertaining to the password used by a second 
encryption means. Thus the invention may be used to securely transfer new passwords 
between users such that conventional encryption mechanisms are significantly improved. 
It is claimed that the second encryption method may be supplied in the same package as 
the first such that the user is unaware of the actual password in use and that the system 
allows the password of the second encryption password to be constantly changes on each 
document send. 

It claimed by such means that should the second encryption method be broken then only 
that message may be accessed and that all other messages that have been encrypted with 
other passwords are secure. 

Furthermore by use of the invention the password may be selected by the receiver and not 
the user adding to the security of the method. 

The password for a document could be included in a single transmission or in a number 
of transmissions such that it would be necessary to break multiple signatures according to 
the invention. It si claimed such a method Is beneficial as it not only allows encoded 
password transmission but allows authentication of where the password is being sent and 
allows the user to know the password was sent by the correct party. Thus such a means 
may be used for secure control of equipment where one party is sent a password to 
operate software or hardware or open a document but does not operate said equipment 
which he has enabled unless he is assured the password was given by the correct source 
Thus the method may be used for secure money transfers where bank accounts 
information is transferred. 
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In a ninth Aspect 

The invention the method is used to provide a means of startup communication where a 
password is not required The transmitter sends to the receiver two or more authentication 
codes where by analysis of both in a specific way it is possible to force fit and find the 
starting sequence. 

By way of example a function of mixed exponetials as figure 3 may be sent along with a 
second function which is the mirror image of the first Whilst the receiver knows no 
information on the actual decay values or their weightings if he knows Hie signals are 
mirror images he may use this information to solve for both data sets in a single fit 
removing the ill conditioned nature of the fit. Sending multiple functions in this way 
allows the receiver to learn the new code providing the method of analysis required of 
the multiple functions are known to both transmitter and receiver 



Figure 3 

The left hand traces show two decay rate distributions one being a mirror of the other and 
the right side the decays from each mixture. Whilst there are a infinite number of 
solutions to each trace by limiting the fit to the maximum number of exponentials 
allowing in the technique and by using prior knowledge that one trace is the mirror image 
of the second the fit may be constrained. This figure demonstrates that by sending 
multiple related traces it is possible for the sender to find an unknown key provided he is 
aware of the relationships between the traces 
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In a tenth aspect of the invention the method is used a s a means of policing use of 
software operating on computer systems. The software may contain the algorithms 
described and communicate over the web some identifier of the computer hardware, the 
user, the date or some other data. The data may include date and time information and 
result in the software stopping if contact with a transmitter occurs for more than a 
specific period of time. The method allows the password required for operation of the 
software to be common for all platforms on initial start-up but to allow the sever to alter 
the password on each communication and thus provide a means where the copying or 
deegineering of the password is of limited use 

Thus the code operating on a PC may cease to operate if a code is not sent to a server and 
the correct code received from the correct source. This method may also be used to allow 
for payment of said software. The user encoding financial information in the send to the 
software house and the software house returning a key. 

In this manner software may be distributed which all has a single key and is thus simple 
to mass produce but on first and subsequent usage the password required by the software 
changes and thus each user has a unique password with me software house usually only 
possible with fixed passwords or methods not suited to mass vending. 

In an eleventh aspect of the invention the method carries out fitting of multiple 
functions where the function type is itself a dynamic change of the code. Thus rather than 
simply than changing the decay of an exponential the type of function is changed instead, 
preferably this would be used with previous aspects of Ihe invention but may be used 
alone. 

In a 12 th aspect of the invention 

It is claimed the method may be made even more secure and each authentication tag may 
be made to include even more data by the use of multiple data sets being used in a fitting 
procedure. The method may be used alone with fixed exponential lifetimes (or other 
mathematical functions) but will add benefit to previous aspects of the invention. 
For a given number of data points and level of noise the number spacing and range of 
magnitudes of the mathematical functions are limited. If this range is exceeded then even 
the force fitting method described is liable to fail. 

In the 12 aspect of the invention this is overcome by sending the same data file but after 
processing through a number of transfer functions known to both transceivers. By way of 
example Figure Xa and b show two simple transfer functions which are simple step 
functions of gain 1 or zero. Figure Xc shows a trace with a large number of exponentials 
which we assume would be unstable in the force fit method for the noise m use. 
However, by sending the data through the two transfer functions we generate two sets 
exponential and thus solution of each set by force fitting is viable. The hacker would 
then require to guess foe transfer function in addition to all other information to crack the 
fit 

By way of example We define two transfer functions as below 
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In a second example two mote complex, functions are used as shown below. In this case 
the transfer functions are not simple steps but a smooth function such that some decay 
values may be present be both traces and some are only present in one or other plot 
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In a third example we claim advantage by defining a transfer function that may be varied 
on each transmission. The trace below shows a complex fenction which may vary- 
between the values shown by the dotted line and the solid Ime. However if both transfer 
functions are linked this may be done by a single variable to stretch and squash each 
function making a low quantity of data make huge changes to the exponential functions 
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In a third example we demonstrate how a plurality of files may be used. In the top trace 
we separate the range of decays used in the analysis into three overlapping gain areas. In 
the following 3 traces we demonstrate the ability to use two gain areas of this set at any 
one time to produce three separate files. In this manner significant constraint may be 
added to the fit as different gain sets overlap in different ways and the force fit may occur 
for minimisation of errors for all four fits at once, as the same exponetials are present in 
all traces, if at different weightings. This makes the force fit significantly more robust 
when dealing with large numbers of mathematical functions that would no be solvable by 
force fitting according to other aspects of the invention 
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In an thirteenth aspect of the Invention a function is not sent directly but a list of 
numbers that appear random are sent or read by the system. The numbers are to 
autocoxrelated gives rise to the function described. In this manner the transmitted signal 
appears a random train of pulses such as may be produced by conventional encryption 
means but no conventional exists within the train to be decrypted. 
The number of bits that must be transferred to allow the function to he properly analysed 
may be varied such that methods that only allow practical correlation by hardwired (or 
firmware) correlators or supercomputers This requirement allows a significant protection 
against conventional hackers operating conventional computer. It is known in the art that 
other processor devices may be used instead of autocorrelators and this is given simply as 
example. 

It is claimed that such a set of numbers may be hidden in a second message or image 
where the second message or image may have useful information or merely be a means 
of improving the security of the technique. 

In an fourteenth aspect cross correlated 

In a fourth aspect of the invention the third aspect is made more secure by use of a 
method of cross correlation. The signal stream is produced such that cross correlation 
with a defined dam set, that the receiver has access to, gives rise to the function for fitting 
as described by previous methods of the invention. 

Ihe second data set or amechanism mat provides for such a dataset may be stored by the 
user such that the method allows for added security of hardware or data files being 
needed by the user. 

The files may be sent separately on differing media 

The files may be sent separately at different times 

The fdes may be sent separately encrypted by different means 

The tiles may be sent from different people thus to action the software or hardware the 
user must receive data from two sources to cross correlate and communicate with a third 
or more persons to obtain the password by means of previous aspects of the invention. 

In a fithteenth aspect of the invention the method of the third and four aspects are 
improved by use of sending the signal at such a magnitude it is lost in the noiseband. The 
signal may be transmitted directly at very low magnitude or superimposed on a 
conventional message stream. The signal may be encoded in bit height or bit width and 
the message is removed by autocorrelation means. Thus the underlying signals are 
repeated many times to allow the autocorrelator to reduce the effects of noise but the data 
may be pseudo random. This method may be used with previous aspects of the invention 
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In a sixteenth aspect of the invention the data which is to be encrypted into the data is 
first encrypted by other means. It is claimed this gives adavanatge to the method and is it 
limits the possaoihty of allowing hackers to attempt to guess the the inventions 
encryption code simply by means of analysing an uncoded message with that which has 
been coded 

to. a sixteenth aspect of the invention the data produced by rthe invention is encrypted by 
other means before transmission. It is claimed this gives adavnatge as it hides the 
underlying functions which the information has been encrypted in 
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Figure Multiple Encryption 

The above shows a mechanism where three types of encryption are used. The data, 
anmenncation codes and mutation codes ate first encrypted by a first encoding 
mechanism. This data file is then used to produce the ill conditioned analysis according 
to the mvention which is turn generates a data file. This data file is then encoded by a 
third encoder. Where a data file is also transferred this may be summed with the encoded 
date by means of suinnnng the two in a single file. In the art such a file is termed a tarball 
and frequently includes compression. Preferably the first and third encoder are of 
different methods. 

In decoding toe method is reversed. The passwords for all the encoder means may be 
transferred by the initial data file. 

In this example if the tarball is itself decoded, this does not allow the hacker to connect 
the decrypted attached file with the complex function sent in order to attempt to de- 
nser the decode key as the raw decode key has been decoupled from the encoded file 
by the first encoder means. 
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One example of an implementation of the invention in computer code is now given 

The code used for the 12 exponetial fits is given as an example of implementation of the 
method 

/$ld: testl2bxc,v 1.2 2002/09/26 15:01:45 carlos Exp $ 
include "expJh" 
^include "maiquardtJh" 
^include <btttz/arrayi> 
^include <iostream> 
#include <matfcLh> 
^include <fstream> 
^include <piocbuf i£> 
^include <random/ncxrmal.h> 
^include <timeJb> 
using namespace blitz; 
using namespace ranlib; 
class Result 
{ 

public: 

Result(void) :r(l ,4) 9 parms(r,r) { } 

~Result(void){} 

Ranger; 

Array<long doubled parms; 

Airay<long doubie,2> nm(const long double& e,const Array<long double,l>& 

data 3 const Array<long double, 1>& p) 

{ 

intnExps=12; 
ExpN test(nExps); 
long long int nr=8196; 

Range r(U l*n),s(l,3*nExps),t(l^*nExps),u(U2); 

Array<ong double 9 l> resultCr) s total(r) 9 pamis(s);. 

Array<ong double^ vax(t,t)^es(t,u); 

Array <int, 1> v(t)j 

long double error; 

long long int i; 

parms=p; 

error - 0.0001; 

v(l)=l; 

fbrCi=3;i<=2*nExps;i-+-2) 

v(i)=v(i-2)+3; 
v(2)=3; 

for(i^;i<^*nE>cps;i+=2) 

v(i)-v(i-2)-K}; 
#ifdefBZ_DEBUG 
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cout « n v: " « v « endl; 
#endif 
forO= 1 ;i<^=3 *nExps?[-f=3) 
{ 

parms(i+l)=0.0; 
} 

parms(3)=-48.0; 

parms(6)=^72,0; 

pamis(9)=-I08.0; 

parms(I2)=-16Z0; 

paims(15)— 243.Q; 

parms(18)=-365.0; 

panns(21)— 547,0; 

pamis(24)=^820.0; 

pamis(27)— 1230>0; 

parms(30)=--1845.0; 

paims(33)=^2768.0; 

pamia(36>M152.0; 
#ifdef BZ_ DEBUG 

cout « panns « endl; 
#endif 

resuJt^s^data^parms); 
Array<3ong double, 1 > noisyResulfc(r) ; 
for(i=l;i<=ll*ri;i++) 
{ 

^ormal<long doublo nonnalGeuCi^ulta^enbr^uItCi)); 

normalGen.seed((unsigned int)time(0)); 
noi^Rcsult(i)^noimalGenjrandomO; 

Array<;lojig double,2> pointsfos); 

points(Range::alIO,l>=data; 

point5(jRange::aU0^)=^oi^Result; 

points(Range::aU03)=eaTor*noisyResult; 
Marquardt m; 

for(i=l;i<=3*nExps^3) 

parms(i>=2.0; 
#ifdefBZJ>BBUG 

cout « panns « end]; 
#endif 

m.setPrecission(0.0000I); 

var » ra(points,paims ) v 5 test); 

cout « panns « endl; 

cout « var « endl; 
resultf=46st(data,panns); 
ofstream file("data.dat ff ); 
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file « data(i) « W « result® « V « noisyResult(Q « endl; 
file.closeO; 
return res; 

} 

int main(void) 

{ Range r(l,36) ? s(l,2),t(l,ll*8196); 
AiTay<long doubled res(r,s); 
Array<lorig double,l> parms(r),dataCt); 
long double em>r 3 ti/lfc=0~01; 
long int ij>a=8196; 
ti=0.0; 

for£=l;i<=ll;H-+) 
{ 

forQ=l3<^=na++) 

^date(n*(i-lHj)^+j*pow(2.0Xdouble)a-l))*dt; 
} 

ti=data(n*i); 

} 

for(i==l ^<=paims.sizeO;i += 3) 

parms(I)=4-0; 

coul « parms « endl; 

nm(error > data^parms); 

fortf^! ;i< : =panns.sizeO;i +c:= 3) 

parms(i)=l ,0; 
paxms(] )=panns(34)=4.0; 
cout « parens « endl; 
run(error,data,parms); 
for(i=l ^<=-parms,sizeO;i^3) 

parrns(i)=l .0; 
parms(16)=parms(19)^4-0; 
coul « parms « endl; 
run(error,data J paims); 
for(r=l ;i<^anns,3ize0;i+=6) 

pannsfO^l .0; 

fox(i^?<^arms.5ize0^+==6) 

parms(i)==4-0; 
cout « parms « endl; 
run(enor,data,parms); 
for(i^l -4<^)anns^sizeO;i-H=6) 

parms(i)=4-0; 

forCi^^^parms.sizeOsi+^e) 
parmsCO^l-O; 
cout « parrns « endl; 
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ri^eCTor^data^paxms); 
return 0; 

} 

//Sid: testl2.cc,v 1.2 2002/09/26 15:01:45 carlos Exp $ 
#include "expA" 
#include "marqttardth 11 
#include <blitz/airay,h> 

^include <iostream> 
#include <mattLh> 
#include <fstream> 
#iaclude <procbuf Jh> 
^include <tendom/iiormaLli> 
^include <timch> 
using namespace blitz; 
using namespace ranlib; 
class Result 
{ 

public: 

Result(void)^(l,4),panns(r ) r){} 

•^R.e5uIt(void){} 

Range r; 

Array<3ong double 5 2> parms; 

}; 

Array<long double>2> mn(const long double& e,const Anay<iong double 9 l>& 
data,const Array<Iong double > l>& p) 

int nExps=12; 
ExpN test(nExps); 
long long int n=8 1 96; 

Range l^nXsCl^^nExpsXtC^nExps),^!^); 

Array<long double,l> resultCrXtotalCrXparms^s); 

Array<long double^ var&fKresfou); 

Array<int, 1 > v(t); 

long double error; 

long long in± i; 

parms^p; 

error = 0*0001; 

v(l)=l; 

for(i-2;i<==nExps;i4-f) 

v(i)==v(i-l)+3; 
#ifdefBZ_DEBUG 

cout « "v: 11 « v « endl; 
#endif 

for(i=l ;i<=3 *nExps;i-H=3) 
{ 
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parms(i+l>=0.0; 
} 

parms(3)=~48.0; 
parras(6)=-72.0; 
parms(9>-108.0; 
pamis(12)~-162.0; 
paims(15)=^243.0; 
parms(l8)=^365.0; 
parms(21>=-547 r 0; 
parms(24)=-820.0; 
patms(27)«- 1230.0; 
parms(30)^-l 845.0; 
parms(33)=-2768.0; 
panns(36)=-*152.0; 
#ifdefBZ_ DEBUG 
cout « parras « endl; 
#endif 

result=test(data,parms); 

Array<long double, 1> noisyReault(r); 

for(i=ld<=ll*n;i++) 

NonnaKong doublo normalGeaCresuItCO.eiroi^resullKi)); 

normaIGen.seed((uiisigned int)time(0)); 
noisyResult(i)=normalGeii.randomO; 

Array<Iong double,2> points(r,s); 
pointsCRange: :allO»l)=data; 
points(Range: :allO>2)=noisyResult; 
points(Range: :aU03)=error*noisyResult; 
Marquardt m; 
for(i=l ;i<=3*nExps;i-*=3) 

pannsCi) 5 ^^; 
#ifdefBZ_DEBUG 
cout « parms « endl; 
tfendif 

m.setPrecission<0.00001); 
var = m(points,panns,v,test); 
cout « parms « endl; 
cout « var « endl; 
result=test(data,parms) ; 
ofstream fileCdata.dat"); 
for(i=lu<=ll*n;i++) 

file « data® « 'Vt' « result® << V «noisyResult(i) « endl; 
filccloseO; 
Teturnres; 
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} 

Intmain(void) 
{ 

Range r(l,36)»s(l,2),t(l,l 1*8196); 
Array<ong double,2> res(r,s); 
Ariciy<IoDig double, 1> paims(r),data(t); 
long double eiror ? ti.4t=a0 1 ; 
long intij>i=8 196; 
ti=0,0; 

for(i=l;i<=ll;i-H-) 
{ 

forO=la<==nii++) 
{ 

data(n*(i-l)4j)=tHj>pow(2.0,(douW l))*dt; 
ti=data(n*i); 

} 

for(i~l ;i<=pann5.sizc0;i+=3) 
parras(i>=4.0; 
cout « panns « endl; 
run(error > dala ? parras); 

for<i^l ;i<«parms-size0;i+=3) 
pann$(i>=L0; 

parms(l)=parnis(34)=4.0; 
cout « parms « eandl; 
runCerro^daia.parms); 
for(i=l ;i<=paims.si2»0;i+ =s 3) 
panns(I)=LO; 
parms(16>=parms(l 9)=4.0; 
cout « parms « endl; 
run(error,data,patms); 
for(i=l ;i<=parms.size0;i+=6) 
parms(i)=l.O; 

for(i=4;i<^arms-size0;i-^=6) 
parms(i)==4.0; 
cout « panns « endl; 
run(eiror ? data,parras); 
for(r= 1 ;i<^anns,siz<);i-h==6) 
parms(i)=4.0; 

fot<i==4;i<=parms^ize0;i+=6) 
panns(i)=LO; 
cout « parms « endl; 
run(error > data jl parms); 
return 0; 



//$Id: exp.cc,v 1.2 2002/09/26 15:01:45 carlosExp$ 



} 
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//definition of the exp function 
#haclude "exp.h" 

Array<loiig double,l> Exp: :operatorO(const Array<long double,l>& x,const Array<long 
doiible,l>& p) 
{ 

Range r(l,x.sizeO)j 
Array<long double,l> res(r); 
res=p(l)*exp((x+p(2))/p(3)); 
return res; 

inay<long double,2> Exp::grad(oonst Airay<long doubled* x,const Anuy<long 
double,l>&p) 

Range Kl»x-sizeO)^(l>P-sfe«0); 
Array<ong double»2> res(r,s); 
res(Range::aU0,l>=exp((x+p(2))4)(3)); 
res(Rang B ::aU0,2)=p(irexp((x+p(2))/p(3)yp(3); 
tes(Range::aU0 3 3)=- 1.0*p(l)*(x4^K2))*exp((x-«ij(2))/p<3)ypow2(p(3)); 

return, res; 

irray<long donble,3> Exp::hessten(ccmst Airay<long double, 1>& x,const Aixay<long 
double,l>&p) 

Range r(l»x.sLzeO)>5(l,p.sizeO); 
Aixay<long doubled res(r,s,s); 
Array<long doiible ? 2> grad(r,s); 
grad = this->grad(x,p); 

res=grad(tensoT::i,tensoT:y)*gmd(tenson:i,tenson:k^ 
return res; 

^//definition of the Exp2 function as the sum of two exps 

Aixay<long double,l> BxpN::operatorO(const Array<tong double,l>& x,const 

Array<long double,l>& p) 

{ 

#ifdefBZ_DEBUG 

cout « "in ExpN" « endl; 

cout«p«endl; 
#endif 

Expf; 

Range r(l,x.sizeO); 
inti; 

Aixay<ong dcrable,l> res(r); 

ies(Range::aJ10>=0^0; 

for(i=0;i<N;i++) 

res+^^pCRangeCCS^i^U^a+l)))); 
return res; 
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} 

Array<long double^ ExpN::grad(const Array<long double,I>&x,<»nst Airay<long 
double, l>&p) ' 5 

{ 

inti; 
Expf, 

Range r(l,x.size()),s(l,p.sizeO); 
Array<long doubled resfos); 

resCRange::all0toge((3^)+l,3*(i+1)))HF.grad(x,p(l^e((3^^ 
return res; 

} 

//-*-C++-«- 

//$Id: inverse.h,v 1.1.1.1 2002/08/29 10:31:10 carlos Exp $ 
#inc]ude <blitz/arrayJi> 
tfifiidef INVERSE H 
#define 1NVERSEJH 
using namespace blitz; 

template <class Type> Array<Type,2> inverse(Amy<rype,2>& V 
mmclude "invetse.cc" 
#endif, 
//-*- C++ -*- 

//Sid: exp.h,v 1.1.1.1 2002/08/29 1 0:3 1 :0S carlos Exp $ 
#ifhdefEXP H P * 

#define EXP H 
^include <blitz/array.h> 

#inc]ude "fimction.h M 
using namespace blitz; 
class Exp: virtual public Function 

public: 

//constructor 

Exp(void):Funetion(3)0 

//copy constructor 

Exp(const Exp& c):Function(3){} 

//parentheses operator 

virtual Anay<long double, l>operator(Xconst Arxay<long double,l>&,const 
Army<longdouble > l>&); 

//the derivative with respect to each parm at each point 
//parms in rows, points in columns 

virtual Array^ong double,2>grad(const Array<long double, l>&,const Array<long 
oouble,l>&); 

//the hessian, rank three tensor, first Index data point 

Array<long double,3>hessian(const Array<long double, l>&,const Army<W 
double,l>&); 
//destructor 
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virtual ~Exp00 

class ExpN: virtual public Function 
{ 

public: 
//constructor 

ExpN(const int& n):Function(3*n),N(n){} 
//copy constructor 

ExpN(const ExpN& e):Function(3*e.N)^r(e.N){} 
//parentheses operator 

virtual Array<ong double, l>operator()(const Army<long double, l>&,const 
Array<long double,l>&); 
//the derivative with respect to each parm at each point 
//panns in rows, points in columns 

virtual Array<long double,2>grad(const Array<long doubled >& 3 const Array<oi]g 
double,l>&); 
//the hessian, rank three tensor, first index data point 

Array<long double»3>hessian(const Array<long double,l>&,const Array<ong 

double, 1>&); 

int getN(void) const {return N;} 

//destructor 

virtual -ExpNOO 
private: 

//no of exponentials 

int"N; 

}; 

#endif 

/$Id: marquardtc^v 1.4 2002/09/26 15:01:45 carlos Exp $ 

#include <fclitz/array-h?> 

^include "inverseJi" 

^include "marquardiJi" 

#include <stdio.b> 

^include <mathJb> 

using namespace blitz; 

// implementation of the Levenberg-Marquardt method 

Array<Iong double,2> Marquardt::mjethod(const Array<long double,2>& d,Array<long 

double, 1>& p,const Array<inU>& v,Function& f) 

{ 

#ifdef BZ_ DEBUG 

cout « "in marquardtO" <<c endl; 

cout«p«endl; 
#endif 

Range sCl^rowsOXl^-sizO)^ 1 ^ size 0); 
Array<long doubled Yt(s),g^(^ 

Array<ong double,2> df(s ft r)Jiessian(rj),one(r > r) 4 c(r,r),cJ(r4:) ,tmpl(sj),tmp2(s,t); 
ChiSquare=0; 
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long double lambda=0.00001,chil=0.0,NonnQrad=0.0; 
in* l,m,stop=O,NIter=0; 
// set the unit matrix 
for(l=l;l<=v.si2E0;l++) 
{ 

for(m=l pn<=v. sizeO;m++) 

one(l,m)=Q.O; 
one(U)=1.0; 
> 

// set P to the values of the parameters to vary 
for(]=l ;l<=v.sizeOU++) 
P(l)=p(v(l)); 
pl=p; 
#ifdef BZ DEBUG 

cout « "starting outer loop" « end]- 
#endif 
do 
{ 

#ifdef BZ .DEBUG 

cout « "calculating Yt" « endl- 
#endif 

Yt^(d(Range::allO,l),p); 

trap = pow2(((d(Range::aU0^)-Yt)/d(Range::all0,3))); 

ChiSquare - sum(tmp); 
#ifdefBZJ)EBUG 

cout « "calculating grad" « endl: 
tfendif 

tmp2===f.grad(d(Range::allO,l),p); 
for(l=l ;L<=v.sizeO;l++) 

{ 

df^ange::all0 > l) i,= tmp2(Range::aU0,v(J)); 

tmp = ((<I(Range;:aflO^>Yt)*pow2(LO/d(Range::aU03))); 
tmpl =tan7(tensan:i)*dfl[tenson:i,tenson:j); 
tbr(l=l ;K=v.sizeO;l-H") 

grad(l>=sum(tmpl (Range: :all(),l)); 
tmp = pow2(L0/d(Range::aI10,3)): 
#ifdefBZ DEBUG 

cout « "grad: ■ «grad « endl; 
cout « "calculating the hessian" « endl: 
ffendif 

c=hessian(tensor::i > tensor::j); 
ffldef BZ J>EBUG 

cout « "hessian: " « hessian « endl- 
#endif 
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do 

{ 

#ifdefBZJ>EBUG 

cout « "calculating the inverse" « endl; 
#endif 

for(l=l ;l<=v.sizeO;l++) 
ca,l)=liessian(l,l)*(LO+lambda); 

#ifdcf BZ DEBUG 

cout « "c; " « c « endl; 

#endif 

c_I==inverse(c); 
#ifdcf BZJDEBUG 

cout « "trying paxms" « endl; 

cout « "chil: " « chil « endl; 

cout « "ChiSquare: " « ChiSquare « endl; 

cout « "p: " « P <<: endl; 

cout « "pi: " «pl « endl; 

#endif 

PlHP+sum((grad(tensor: :j)*c_l (tensor::i,tensor::j)),tensor::j); 

foiO=l;l<^.sizeO;l++) 

pl(va»=Pia); 
Ytr=f(d(Range::aUO»l),pl); 

top - po^((d(TRange::all03>-Yt)/d(Elange::allO,3))); 

chil===sum(lrnp); 
ifl[chil>ChiSquaTe) 
larribda*=10.0; 

} 

wlnle(chil>ChiSquare); 
#ifdefBZ_DEBUG 

cout « "updating parms" « endl; 

#endif 

P=pi; 
P=P1; 

1ambda/=10.0; 

i^fabs(ChiSquare-chil) < Precission) 
stop++; 

else 

stop=0; 
Nlter++; 

NoTmGxad==noxmferad); 

while(NormGrad >= Precission && Niter <= IterMax && stop < 5); 
//calculate the error of the parameters 
o_l=inverse(hesaian); 
ChiSquare=chil; 



#ifdefBZ_DEBUG 
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cout « "exiting marquardtO" « endl: 
#endif 
return c_l; 

> 

/-*-C+-h-*- 

//$Id: functionJb,v L1.1J 2002/08/29 10:31:08 carios Exp $ 

SfhdefFUNCnONJH 

#define FUNCTION_H 

#include <blitz/aiTay.h> 
using namespace blitz; 
class Function 
{ 

public: 

Function(const int& n): NPaims(n){} 
//copy constructor 

Function(const Function& f) :NPaims(f JNIParms) { } 
//overload the parentheses operator pure virtual, force subclassing 
virtual Array<long double, l>operator0(const Array<long doubleJ>&,const 
Array<long double,l>&) = 0; 
//the derivative with respect to each parm at each point 

virtual An*y<long double,2>grad(const Airay<long double, l>&,const Array<long 
donb!e,l>&) = 0; 

//returns the number of adjustable parameters 
int nParms(void) const {return NParms;} 
//destructor 
virtual -FunctionOf} 
private: 

//contains the number of parameters 
int NParms; 

}; 

#endif 

//$Id: manquardth,v 1.L1.1 2002/08/29 10:31:08 carios Exp $ 

#ifodefMARQUARDT_H 

#define MARQUARDTJH 

#include <blitz/arraylt> 

^include "ftMethodJh" 

using namespace blitz; 

// returns the euclidean norm of a vector 

template <class Type> inline Type norm( Array<Type, 1 >& v) 

return sqrt(sum(pow2(v))); 

// fits a set of data to a function using the Levenberg-Marquardt method 
class Marquardt: virtual public FitMetfcod 
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{ 

public: 
//default constructor 

Marquardt(void):Pi^cisston(0.00000iyterMaxC100){} 
//creates an instance with given values of Precission, etc 
Marquardi(cQnst long double& p^const int& m):Precission(pyterMax(m){} 
//copy constructor 

Marqiiardt(const Maxquardt& m): Precission(m.Precission) JterMax(m JterMax){ } 

//returns the current value of precission 

long double getPiecission(void) const {return Precission;} 

//returns the current value of IterMax 

int getlterMax(void) const {return IterMax;} 

//sets the value of Prepission 

void setPrecission(const long double& p) {Precission=p;} 

//sets the value of IterMax 

void setIterMax(const int& m) {IterMax=m;} 

//destructor 

virtual ~Maxquardt(){} 

P vSual Array<long doubled method(const Array<long double ? 2>&^rray<long 
double > l>&,const Array<int > l>&,Fiuiction&); 

long double Precission; 

int IterMax; 

}; 

#endif 

//$Id: inverse.cc,v 1.2 2002/09/25 15:38:44 carios Exp $ 
#inchide <blitz/array.h> 
using namespace blitz; 

template <class Type> Array<Type^> inverse(Array<Type 3 2>& A) 
{ 

#ifdcf BZ JXEBUG 

cout « "in inverseO" « endl; 
#endif . . 

//trying to implement gauss-jordan with scaled row pivoting 

//from kincaid-chency p 183 

int tv= A.rows()40 X^l 

f/B will contain the inverse, and one is the unit matrix of 
Range r(l A-rowsQ); 
Array<Type^> B(pfy^tASKr& 
If C=A' 
C=A(teiJsor::i^ 
//permutation vector 
Array<int,l>p(r); 
p = tensor. :i; 
//array for scaling 
Array<long double,l> S(r); 
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S - max(fabs(C),tensor::j); 
#ifdef BZ DEBUG 

cout « "C: " « C « endl; 

cout « "S: " « S « endl; 
#cndif 

//set the values of the unity matrix 
for{i=l;i«=n;i++) 

{ 

for(j=la^nj++) 

one(ij)=0\0; 
one(i,i)=1.0; 

} 

for(k?=l;k<n^c++) 
{ 

#ifdef BZ DEBUG 

cout « "factorising" « endl; 
#endif 

//factorisation phase 
Range t(k,n); 

Array<long double,l> nnp(t); 
float z; 

forO'-ky<«ua++) 

tmpQ) = febs(C(pO)4c))/S(pO)>; 

j = maxlndex(tmp)(0); 
#ifdefBZ_DEBUG 

cout « "trap " « tmp « endl; 

cout « "j " << j « endl; 
#endif 

m=p(j); 

pQ)=p(k); 

far(i=k+l;i«^;i-H-) 
{ 

r=C(p(i),k)/C(pCk),k); 

for<j=k+l y«s=njjH-i-) 
C(pa)J)=C(p(i)j)-z*C(p(k),j); 

} * 

//now the solution, in this case the b's are the columns of one 
• //and the x*s the columns of the inverse, stored in B 
#ifdefBZ DBBUG 

cout « "solving" « endl; 
#cndif 

for<l=l;K=n;l++) 
{ 
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for(kr=l;k<a;k++) 
for(i=k.+l ;i<=mrH-) 
one(p{iU)=Dne(pCi),l)-CCp(i) > k)*one(p(k.),l); 
B(n,l)=oiie(p(n),l)/C(p(n),n); 

for(i=n- 1 ;i>= 1 [ 
B(U)Koneto(OA)-^(<XP®^^ 

BW(tetisor::i,tensor::jysqrt(fabs(A(tei«or:d,tensor::i)*A{te^ 
return B; 



} 
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Claims 



A method for encoding and decoding information, the method comprising the steps 
of: 

(a) selecting a mathematical function having at least one parameter 

(b) constraining the mathematical function by defining a decoding key as the 
value of at least one parameter of the function 

(c) generating encoded data using the mathematical function according to 
the information and the decoding key 

(d) decoding the encoded data, using the decoding key to constrain the 
mathematical function 

wherein decoding of foe mathematical function would be ill-conditioned without 
the constraint 

A method according to claim 1 wherein the information comprises at least one 
encryption key. 

A method according to claim 2 and further comprising the step of using the 
encryption key to encode and decode data in a public key cryptosystem. 

A method according to any one of the preceding claims, and including the step of 
reducing the precision of the encoded data. 

A method according to claim 4 wherein the precision is reduced using truncation. 

A meOiod according to claim 4 or claim 5 wherein the precision is reduced using 
rounding. 
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7. A method according to any one of the preceding claims and including the step of 
parting noise to the encoded data: 

8. A method according to any of the preceding claims and including the additional 
step of sending the encoded data over a communication link. 

9. A method according to any one of the preceding claims and including the step of 
storing the encoded data in a storage medium. 

1 0. A method according to any one of the preceding claims wherein the information 
includes a password 

11. A method according to claim 1 0 and including the step of using the password to 
decrypt one or more files. 

12. A method according to claim 10 or claim 1 1 and including the step of using the 
password to access an area. 

13. A method according to any one of claims lOto 12 and including the step of using 
the password to use equipment 

14. A method according to any one of claims 10 to 1 3 and including the step of using 
the password to use software. 

15. A method according to any one of the preceding claims wherein the information 
includes an authentication marker and the method includes the further step of 
authenticating the encoded data using the authentication marker. 

16. A method according to any one of preceding claims wherein the information 
includes mutation information and the method includes the step of using the 
mutation information to after at least one of the parameters in a defined manner. 
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A method substantially as herein described with reference to the accompanying 
drawings. 
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